Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 10 Apr 1999 20:32:27 -0700
From:      Jamie Norwood <mistwolf@ethereal.net>
To:        freebsd-net@FreeBSD.ORG
Subject:   NatD question
Message-ID:  <19990410203227.A23292@ethereal.net>

next in thread | raw e-mail | index | archive | help
I have an odd(?) NatD setup I am tryin to implement but haven't been able 
get it working or find adequate resources to help me figure it out.

I have a cable modem, and with it I am assigned 4 IPs. Now, as they
are not IPs I can subnet, and because I want some basic firewall functions
(Blocking NetBios, for instance.), I want to connect the cable modem
to my FreeBSD server, then connect a second NIC to a hub on which rests
2 other machines.

This part i have wokring ok. What I want, though, is for those two machines 
to be accessible from the outside world as public IPs through transparent
translation on the FreeBSD box.

So what I have is:

  The Internet 
       | 
       |
/-------------\ 
| Cable Modem |
\-------------/
       |
       |
       \--------------------------------------\ 
                                              |
                                              |
                                      /---------------\ 
                                      | 208.166.54.56 |   
                                      | 208.166.54.57 | 
                                      | 208.166.54.58 |              
                                      |               | 
                                      |  10.166.54.56 |   
                                      \---------------/ 
                                              |
                                           /-----\
                 /-------------------------| Hub | 
                 |                         \-----/ 
          /--------------\                    |          
          | 10.166.54.57 |                    |               
          \--------------/                    |
                                       /--------------\ 
                                       | 10.166.54.58 | 
                                       \--------------/

Where do I begin in writing the NatD rules that will allow packets destined
for 208.166.54.57 hit 10.166.54.57, and for machines on the internet to see
10.166.54.57 as 208.166.54.57 when sending packets back?

Thanks!

Jamie


-- 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GCS d- s+:+ a--(?) C++++ UB++++ P+ L--(++) E-- W++(--) N++ O?
K w(---) O?>+ M?>+ V PS+ PE+ Y+ PGP->++ t+(*) 5+++ X++ R++ tv+
b+ DI++++ D++ G e>+ h--- r+++ y+++**
------END GEEK CODE BLOCK------



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990410203227.A23292>